Technology Risk Associate - IT Audit

About the role

EY is looking for an Associate to join its IT and auditing practice in Belgrade, supporting challenging IT audit engagements for clients across different industries and technology platforms. The role helps clients manage IT risk proactively, and offers opportunities to learn, mentor junior team members and drive project success.

Key responsibilities

• Support IT audit engagements such as IT general controls (ITGC) audits, regulatory and group IT audits, IT due diligence, client-requested IT reviews and SOC reporting, through control assessments, risk identification, testing and recommendations.
• Review the control environment, identify IT risks and findings, and provide recommendations.
• Assist in IT audit controls testing and fieldwork.
• Work as a team member, keeping senior colleagues updated on progress.
• Help prepare final reports on technology risk services for clients.
• Maintain an ongoing education plan and support quality assurance and risk management on digital transformation and system implementation reviews.
• Stay up to date with industry trends, emerging technologies and regulations, and share knowledge with the team.

Required profile

• Minimum of 2 years of relevant experience in IT audit, information/cyber security, IT governance and compliance.
• Degree in information technology, computer information systems or a related field (preferable).
• Understanding of IT audit methodologies (preferable).
• Strong attention to detail, analytical thinking and problem-solving skills.
• Fluent English.

Required skills

• Experience with ITGC and IT audits under international frameworks (COBIT, ISO 27001, SOC 1/2) is a plus.
• Experience auditing SAP, MS Business Central, SQL or Oracle databases, Linux/Windows or Active Directory is an advantage.
• Advanced Excel and good use of Microsoft Word and PowerPoint.
• Project coordination with cross-functional teams.